@marinjursic/prc-linux-arm64 0.1.0 → 0.2.0

package/bin/schemas/control-classification-final.schema.json

@@ -0,0 +1,64 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/control-classification-final.schema.json",
+  "title": "Production Readiness Final Control Classifications v0.1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "packet_id", "methodology_sha256", "registry_version", "registry_sha256", "source_path", "control_count", "controls"],
+  "properties": {
+    "schema_version": {"const": "prc.control-classification-final/v0.1"},
+    "packet_id": {"type": "string", "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*-part-[0-9]{3}$"},
+    "methodology_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "registry_version": {"type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"},
+    "registry_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "source_path": {"type": "string", "minLength": 1, "maxLength": 1000},
+    "control_count": {"type": "integer", "minimum": 1, "maximum": 250},
+    "controls": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 250,
+      "items": {"$ref": "#/$defs/classification"}
+    }
+  },
+  "$defs": {
+    "clause": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["statement", "checker_family", "evidence_authority"],
+      "properties": {
+        "statement": {"type": "string", "minLength": 1, "maxLength": 2000},
+        "checker_family": {
+          "enum": ["inventory_fact", "structured_document", "package_metadata", "ci_policy", "container_iac", "source_ast", "artifact_integrity", "analysis_adapter", "execution_evidence", "environment_evidence", "structured_record"]
+        },
+        "evidence_authority": {
+          "enum": ["repository", "artifact", "executed", "environment", "external_registry", "structured_record"]
+        }
+      }
+    },
+    "classification": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["control_id", "revision", "semantic_sha256", "classification", "route", "reason", "deterministic_clauses", "nondeterministic_reason_codes", "decision_basis", "skeptical_verdict", "counterexample_analysis"],
+      "properties": {
+        "control_id": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"},
+        "revision": {"type": "integer", "minimum": 1},
+        "semantic_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "classification": {"enum": ["deterministic", "nondeterministic"]},
+        "route": {
+          "enum": ["local_static", "artifact_verification", "bounded_execution", "external_readonly_query", "structured_record_validation", "deterministic_composite", "contextual_judgment", "accountable_human_decision", "specialist_or_legal_judgment", "empirical_protocol_undefined", "contract_incomplete", "mixed", "unbounded_claim"]
+        },
+        "reason": {"type": "string", "minLength": 20, "maxLength": 4000},
+        "deterministic_clauses": {"type": "array", "maxItems": 50, "items": {"$ref": "#/$defs/clause"}},
+        "nondeterministic_reason_codes": {
+          "type": "array",
+          "maxItems": 9,
+          "uniqueItems": true,
+          "items": {"enum": ["contextual_judgment", "human_accountability", "legal_or_specialist_authority", "undefined_protocol", "undefined_scope", "undefined_threshold", "mixed_with_nondeterministic_child", "unbounded_scope", "classification_not_approved"]}
+        },
+        "decision_basis": {"enum": ["primary_nondeterministic", "two_stage_confirmed", "skeptically_rejected", "strength_audit_confirmed", "strength_audit_reclassified"]},
+        "skeptical_verdict": {"type": ["string", "null"], "enum": [null, "confirmed_deterministic", "rejected_nondeterministic"]},
+        "counterexample_analysis": {"type": ["string", "null"], "minLength": 20, "maxLength": 4000}
+      }
+    }
+  }
+}

package/bin/schemas/control-classification-review.schema.json

@@ -0,0 +1,161 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/control-classification-review.schema.json",
+  "title": "Production Readiness Control Classification Review v0.1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "packet_id", "methodology_sha256", "registry_version", "registry_sha256", "source_path", "controls"],
+  "properties": {
+    "schema_version": {"const": "prc.control-classification-review/v0.1"},
+    "packet_id": {"type": "string", "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*-part-[0-9]{3}$"},
+    "methodology_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "registry_version": {"type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"},
+    "registry_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "source_path": {"type": "string", "minLength": 1, "maxLength": 1000},
+    "controls": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 250,
+      "items": {"$ref": "#/$defs/review"}
+    }
+  },
+  "$defs": {
+    "clause": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["statement", "checker_family", "evidence_authority"],
+      "properties": {
+        "statement": {"type": "string", "minLength": 1, "maxLength": 2000},
+        "checker_family": {
+          "enum": [
+            "inventory_fact",
+            "structured_document",
+            "package_metadata",
+            "ci_policy",
+            "container_iac",
+            "source_ast",
+            "artifact_integrity",
+            "analysis_adapter",
+            "execution_evidence",
+            "environment_evidence",
+            "structured_record"
+          ]
+        },
+        "evidence_authority": {
+          "enum": [
+            "repository",
+            "artifact",
+            "executed",
+            "environment",
+            "external_registry",
+            "structured_record"
+          ]
+        }
+      }
+    },
+    "review": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "control_id",
+        "revision",
+        "semantic_sha256",
+        "classification",
+        "route",
+        "reason",
+        "deterministic_clauses",
+        "nondeterministic_reason_codes",
+        "review_status"
+      ],
+      "properties": {
+        "control_id": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"},
+        "revision": {"type": "integer", "minimum": 1},
+        "semantic_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "classification": {"enum": ["deterministic", "nondeterministic"]},
+        "route": {
+          "enum": [
+            "local_static",
+            "artifact_verification",
+            "bounded_execution",
+            "external_readonly_query",
+            "structured_record_validation",
+            "deterministic_composite",
+            "contextual_judgment",
+            "accountable_human_decision",
+            "specialist_or_legal_judgment",
+            "empirical_protocol_undefined",
+            "contract_incomplete",
+            "mixed",
+            "unbounded_claim"
+          ]
+        },
+        "reason": {"type": "string", "minLength": 20, "maxLength": 4000},
+        "deterministic_clauses": {
+          "type": "array",
+          "maxItems": 50,
+          "items": {"$ref": "#/$defs/clause"}
+        },
+        "nondeterministic_reason_codes": {
+          "type": "array",
+          "maxItems": 9,
+          "uniqueItems": true,
+          "items": {
+            "enum": [
+              "contextual_judgment",
+              "human_accountability",
+              "legal_or_specialist_authority",
+              "undefined_protocol",
+              "undefined_scope",
+              "undefined_threshold",
+              "mixed_with_nondeterministic_child",
+              "unbounded_scope",
+              "classification_not_approved"
+            ]
+          }
+        },
+        "review_status": {"const": "primary_agent_reviewed"}
+      },
+      "allOf": [
+        {
+          "if": {"properties": {"classification": {"const": "deterministic"}}},
+          "then": {
+            "properties": {
+              "route": {
+                "enum": [
+                  "local_static",
+                  "artifact_verification",
+                  "bounded_execution",
+                  "external_readonly_query",
+                  "structured_record_validation",
+                  "deterministic_composite"
+                ]
+              },
+              "deterministic_clauses": {"minItems": 1},
+              "nondeterministic_reason_codes": {"maxItems": 0}
+            }
+          },
+          "else": {
+            "properties": {
+              "route": {
+                "enum": [
+                  "contextual_judgment",
+                  "accountable_human_decision",
+                  "specialist_or_legal_judgment",
+                  "empirical_protocol_undefined",
+                  "contract_incomplete",
+                  "mixed",
+                  "unbounded_claim"
+                ]
+              },
+              "nondeterministic_reason_codes": {"minItems": 1}
+            },
+            "anyOf": [
+              {"properties": {"route": {"const": "mixed"}}},
+              {"properties": {"deterministic_clauses": {"maxItems": 0}}}
+            ]
+          }
+        }
+      ]
+    }
+  }
+}

package/bin/schemas/control-classification-skeptic-review.schema.json

@@ -0,0 +1,96 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/control-classification-skeptic-review.schema.json",
+  "title": "Production Readiness Skeptical Control Classification Review v0.1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "packet_id", "primary_packet_id", "methodology_sha256", "registry_version", "registry_sha256", "controls"],
+  "properties": {
+    "schema_version": {"const": "prc.control-classification-skeptic-review/v0.1"},
+    "packet_id": {"type": "string", "pattern": "^skeptic-[a-z0-9]+(?:-[a-z0-9]+)*-part-[0-9]{3}-part-[0-9]{3}$"},
+    "primary_packet_id": {"type": "string", "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*-part-[0-9]{3}$"},
+    "methodology_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "registry_version": {"type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"},
+    "registry_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "controls": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 100,
+      "items": {"$ref": "#/$defs/review"}
+    }
+  },
+  "$defs": {
+    "review": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "control_id",
+        "revision",
+        "semantic_sha256",
+        "verdict",
+        "reason",
+        "counterexample_analysis",
+        "nondeterministic_route",
+        "nondeterministic_reason_codes",
+        "review_status"
+      ],
+      "properties": {
+        "control_id": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"},
+        "revision": {"type": "integer", "minimum": 1},
+        "semantic_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+        "verdict": {"enum": ["confirmed_deterministic", "rejected_nondeterministic"]},
+        "reason": {"type": "string", "minLength": 20, "maxLength": 4000},
+        "counterexample_analysis": {"type": "string", "minLength": 20, "maxLength": 4000},
+        "nondeterministic_route": {
+          "type": ["string", "null"],
+          "enum": [
+            null,
+            "contextual_judgment",
+            "accountable_human_decision",
+            "specialist_or_legal_judgment",
+            "empirical_protocol_undefined",
+            "contract_incomplete",
+            "mixed",
+            "unbounded_claim"
+          ]
+        },
+        "nondeterministic_reason_codes": {
+          "type": "array",
+          "maxItems": 9,
+          "uniqueItems": true,
+          "items": {
+            "enum": [
+              "contextual_judgment",
+              "human_accountability",
+              "legal_or_specialist_authority",
+              "undefined_protocol",
+              "undefined_scope",
+              "undefined_threshold",
+              "mixed_with_nondeterministic_child",
+              "unbounded_scope",
+              "classification_not_approved"
+            ]
+          }
+        },
+        "review_status": {"const": "skeptical_agent_reviewed"}
+      },
+      "allOf": [
+        {
+          "if": {"properties": {"verdict": {"const": "confirmed_deterministic"}}},
+          "then": {
+            "properties": {
+              "nondeterministic_route": {"type": "null"},
+              "nondeterministic_reason_codes": {"maxItems": 0}
+            }
+          },
+          "else": {
+            "properties": {
+              "nondeterministic_route": {"type": "string"},
+              "nondeterministic_reason_codes": {"minItems": 1}
+            }
+          }
+        }
+      ]
+    }
+  }
+}

package/bin/schemas/control-classification-strength-review.schema.json

@@ -0,0 +1,90 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/control-classification-strength-review.schema.json",
+  "title": "Semantic-strength review of deterministic control classifications",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version", "review_id", "methodology_sha256", "registry_version",
+    "registry_sha256", "control_count", "controls"
+  ],
+  "properties": {
+    "schema_version": {"const": "prc.control-classification-strength-review/v0.1"},
+    "review_id": {"type": "string", "pattern": "^deterministic-strength-part-[0-9]{3}$"},
+    "methodology_sha256": {"$ref": "#/$defs/digest"},
+    "registry_version": {"type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"},
+    "registry_sha256": {"$ref": "#/$defs/digest"},
+    "control_count": {"type": "integer", "minimum": 1, "maximum": 250},
+    "controls": {"type": "array", "minItems": 1, "maxItems": 250, "items": {"$ref": "#/$defs/review"}}
+  },
+  "$defs": {
+    "digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "control_id": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"},
+    "route": {
+      "enum": [
+        "local_static", "artifact_verification", "bounded_execution", "external_readonly_query",
+        "structured_record_validation", "deterministic_composite", "contextual_judgment",
+        "accountable_human_decision", "specialist_or_legal_judgment",
+        "empirical_protocol_undefined", "contract_incomplete", "mixed", "unbounded_claim"
+      ]
+    },
+    "reason_code": {
+      "enum": [
+        "contextual_judgment", "human_accountability", "legal_or_specialist_authority",
+        "undefined_protocol", "undefined_scope", "undefined_threshold",
+        "mixed_with_nondeterministic_child", "unbounded_scope", "classification_not_approved"
+      ]
+    },
+    "clause": {
+      "type": "object", "additionalProperties": false,
+      "required": ["statement", "checker_family", "evidence_authority"],
+      "properties": {
+        "statement": {"type": "string", "minLength": 20, "maxLength": 4000},
+        "checker_family": {"enum": ["inventory_fact", "structured_document", "package_metadata", "ci_policy", "container_iac", "source_ast", "artifact_integrity", "analysis_adapter", "execution_evidence", "environment_evidence", "structured_record"]},
+        "evidence_authority": {"enum": ["repository", "artifact", "executed", "environment", "external_registry", "structured_record"]}
+      }
+    },
+    "review": {
+      "type": "object", "additionalProperties": false,
+      "required": [
+        "control_id", "revision", "semantic_sha256", "original_statement", "old_deterministic_clauses",
+        "verdict", "route", "reason", "deterministic_clauses", "nondeterministic_reason_codes",
+        "counterexample_analysis", "review_status", "row_sha256"
+      ],
+      "properties": {
+        "control_id": {"$ref": "#/$defs/control_id"},
+        "revision": {"type": "integer", "minimum": 1},
+        "semantic_sha256": {"$ref": "#/$defs/digest"},
+        "original_statement": {"type": "string", "minLength": 1, "maxLength": 4000},
+        "old_deterministic_clauses": {"type": "array", "minItems": 1, "maxItems": 50, "items": {"$ref": "#/$defs/clause"}},
+        "verdict": {"enum": ["strength_audit_confirmed", "strength_audit_reclassified"]},
+        "route": {"$ref": "#/$defs/route"},
+        "reason": {"type": "string", "minLength": 20, "maxLength": 8000},
+        "deterministic_clauses": {"type": "array", "maxItems": 50, "items": {"$ref": "#/$defs/clause"}},
+        "nondeterministic_reason_codes": {"type": "array", "maxItems": 9, "uniqueItems": true, "items": {"$ref": "#/$defs/reason_code"}},
+        "counterexample_analysis": {"type": "string", "minLength": 20, "maxLength": 8000},
+        "review_status": {"const": "strength_audited"},
+        "row_sha256": {"$ref": "#/$defs/digest"}
+      },
+      "allOf": [
+        {
+          "if": {"properties": {"verdict": {"const": "strength_audit_confirmed"}}},
+          "then": {
+            "properties": {
+              "route": {"enum": ["local_static", "artifact_verification", "bounded_execution", "external_readonly_query", "structured_record_validation", "deterministic_composite"]},
+              "deterministic_clauses": {"minItems": 1},
+              "nondeterministic_reason_codes": {"maxItems": 0}
+            }
+          },
+          "else": {
+            "properties": {
+              "route": {"enum": ["contextual_judgment", "accountable_human_decision", "specialist_or_legal_judgment", "empirical_protocol_undefined", "contract_incomplete", "mixed", "unbounded_claim"]},
+              "deterministic_clauses": {"maxItems": 0},
+              "nondeterministic_reason_codes": {"minItems": 1}
+            }
+          }
+        }
+      ]
+    }
+  }
+}

package/bin/schemas/control-contracts.schema.json

@@ -1,14 +1,34 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/control-contracts.schema.json",
-  "title": "Production Readiness Control Contracts v0.1",
+  "title": "Production Readiness Reviewed Control Contracts v0.2",
   "type": "object",
   "additionalProperties": false,
-  "required": ["schema_version", "registry_sha256", "registry_version", "contract_count", "contracts"],
+  "required": [
+    "schema_version",
+    "generator_id",
+    "registry_sha256",
+    "registry_version",
+    "classification_methodology_sha256",
+    "classification_summary_sha256",
+    "classification_corpus_sha256",
+    "control_check_bindings_schema_version",
+    "control_check_bindings_sha256",
+    "binding_count",
+    "contract_count",
+    "contracts"
+  ],
   "properties": {
-    "schema_version": {"const": "prc.control-contracts/v0.1"},
-    "registry_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "schema_version": {"const": "prc.control-contracts/v0.2"},
+    "generator_id": {"const": "prc.control-contracts@0.2"},
+    "registry_sha256": {"$ref": "#/$defs/digest"},
     "registry_version": {"type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"},
+    "classification_methodology_sha256": {"$ref": "#/$defs/digest"},
+    "classification_summary_sha256": {"$ref": "#/$defs/digest"},
+    "classification_corpus_sha256": {"$ref": "#/$defs/digest"},
+    "control_check_bindings_schema_version": {"const": "prc.control-check-bindings/v0.1"},
+    "control_check_bindings_sha256": {"$ref": "#/$defs/digest"},
+    "binding_count": {"type": "integer", "minimum": 0, "maximum": 100000},
     "contract_count": {"type": "integer", "minimum": 1, "maximum": 100000},
     "contracts": {
       "type": "array",
@@ -18,15 +38,59 @@
     }
   },
   "$defs": {
+    "digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "control_id": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"},
+    "deterministic_route": {
+      "enum": ["local_static", "artifact_verification", "bounded_execution", "external_readonly_query", "structured_record_validation", "deterministic_composite"]
+    },
+    "nondeterministic_route": {
+      "enum": ["contextual_judgment", "accountable_human_decision", "specialist_or_legal_judgment", "empirical_protocol_undefined", "contract_incomplete", "mixed", "unbounded_claim"]
+    },
     "contract": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["control_id", "revision", "contract_status", "canonical_control_id", "evaluation_class", "automation_class", "applicability_class", "atomicity", "complete_inventory_required", "negative_condition", "project_thresholds_required", "evidence_authorities", "not_applicable_proof", "reviewer_status", "contract_sha256"],
+      "required": [
+        "control_id",
+        "revision",
+        "contract_status",
+        "reviewer_status",
+        "classification",
+        "classification_route",
+        "classification_decision_basis",
+        "classification_row_sha256",
+        "deterministic_binding_id",
+        "deterministic_binding_sha256",
+        "canonical_control_id",
+        "evaluation_class",
+        "automation_class",
+        "applicability_class",
+        "atomicity",
+        "complete_inventory_required",
+        "negative_condition",
+        "project_thresholds_required",
+        "evidence_authorities",
+        "not_applicable_proof",
+        "contract_sha256"
+      ],
       "properties": {
-        "control_id": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"},
+        "control_id": {"$ref": "#/$defs/control_id"},
         "revision": {"type": "integer", "minimum": 1},
-        "contract_status": {"enum": ["generated_unreviewed", "reviewed", "retired"]},
-        "canonical_control_id": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"},
+        "contract_status": {"const": "reviewed"},
+        "reviewer_status": {"const": "agent_reviewed"},
+        "classification": {"enum": ["deterministic", "nondeterministic"]},
+        "classification_route": {
+          "enum": ["local_static", "artifact_verification", "bounded_execution", "external_readonly_query", "structured_record_validation", "deterministic_composite", "contextual_judgment", "accountable_human_decision", "specialist_or_legal_judgment", "empirical_protocol_undefined", "contract_incomplete", "mixed", "unbounded_claim"]
+        },
+        "classification_decision_basis": {"enum": ["primary_nondeterministic", "skeptically_rejected", "strength_audit_confirmed", "strength_audit_reclassified"]},
+        "classification_row_sha256": {"$ref": "#/$defs/digest"},
+        "deterministic_binding_id": {
+          "type": ["string", "null"],
+          "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})@[1-9][0-9]*$"
+        },
+        "deterministic_binding_sha256": {
+          "anyOf": [{"$ref": "#/$defs/digest"}, {"type": "null"}]
+        },
+        "canonical_control_id": {"$ref": "#/$defs/control_id"},
         "evaluation_class": {"enum": ["repository", "environment", "human_external", "mixed", "unclassified"]},
         "automation_class": {"enum": ["deterministic_candidate", "ai_advisory_candidate", "environment_evidence_required", "human_or_external_required", "mixed_evidence_required"]},
         "applicability_class": {"enum": ["conditional", "scope_required"]},
@@ -34,11 +98,36 @@
         "complete_inventory_required": {"type": "boolean"},
         "negative_condition": {"type": "boolean"},
         "project_thresholds_required": {"type": "boolean"},
-        "evidence_authorities": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"enum": ["declared", "repository", "artifact", "environment", "human"]}},
+        "evidence_authorities": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": {"enum": ["declared", "repository", "artifact", "executed", "environment", "external_registry", "structured_record", "human"]}
+        },
         "not_applicable_proof": {"type": "string", "minLength": 1, "maxLength": 1000},
-        "reviewer_status": {"enum": ["generated_unreviewed", "expert_reviewed"]},
-        "contract_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"}
-      }
+        "contract_sha256": {"$ref": "#/$defs/digest"}
+      },
+      "allOf": [
+        {
+          "if": {"properties": {"classification": {"const": "deterministic"}}},
+          "then": {
+            "properties": {
+              "classification_route": {"$ref": "#/$defs/deterministic_route"},
+              "classification_decision_basis": {"const": "strength_audit_confirmed"},
+              "deterministic_binding_id": {"type": "string"},
+              "deterministic_binding_sha256": {"$ref": "#/$defs/digest"}
+            }
+          },
+          "else": {
+            "properties": {
+              "classification_route": {"$ref": "#/$defs/nondeterministic_route"},
+              "classification_decision_basis": {"enum": ["primary_nondeterministic", "skeptically_rejected", "strength_audit_reclassified"]},
+              "deterministic_binding_id": {"type": "null"},
+              "deterministic_binding_sha256": {"type": "null"}
+            }
+          }
+        }
+      ]
     }
   }
 }

package/bin/schemas/control-review-output-v0.2.schema.json

@@ -0,0 +1,66 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/control-review-output-v0.2.schema.json",
+  "title": "Advisory complete-control AI review output",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "task_id", "reviews"],
+  "properties": {
+    "schema_version": {"const": "prc.control-review-output/v0.2"},
+    "task_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "reviews": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 8,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["control_id", "assessment_candidate", "applicability_candidate", "confidence", "priority", "reason", "challenge", "risk_if_ignored", "advice", "remediation_steps", "verification_steps", "evidence_needed", "evidence", "limitations"],
+        "properties": {
+          "control_id": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"},
+          "assessment_candidate": {"enum": ["advisory_pass_candidate", "advisory_fail_candidate", "needs_evidence", "not_applicable_candidate"]},
+          "applicability_candidate": {"enum": ["applicable", "not_applicable", "undetermined"]},
+          "confidence": {"enum": ["low", "medium", "high"]},
+          "priority": {"enum": ["critical", "high", "medium", "low", "none"]},
+          "reason": {"type": "string", "minLength": 1, "maxLength": 16384},
+          "challenge": {"type": "string", "minLength": 1, "maxLength": 16384},
+          "risk_if_ignored": {"type": "string", "minLength": 1, "maxLength": 16384},
+          "advice": {"type": "string", "minLength": 1, "maxLength": 16384},
+          "remediation_steps": {
+            "type": "array", "minItems": 1, "maxItems": 12, "uniqueItems": true,
+            "items": {"type": "string", "minLength": 1, "maxLength": 16384}
+          },
+          "verification_steps": {
+            "type": "array", "minItems": 1, "maxItems": 12, "uniqueItems": true,
+            "items": {"type": "string", "minLength": 1, "maxLength": 16384}
+          },
+          "evidence_needed": {
+            "type": "array", "minItems": 1, "maxItems": 12, "uniqueItems": true,
+            "items": {"type": "string", "minLength": 1, "maxLength": 16384}
+          },
+          "evidence": {
+            "type": "array",
+            "maxItems": 256,
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["path", "line"],
+              "properties": {
+                "path": {"type": "string", "minLength": 1, "maxLength": 4096},
+                "line": {"type": "integer", "minimum": 1},
+                "column": {"type": "integer", "minimum": 0}
+              }
+            }
+          },
+          "limitations": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 256,
+            "uniqueItems": true,
+            "items": {"type": "string", "minLength": 1, "maxLength": 16384}
+          }
+        }
+      }
+    }
+  }
+}